Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json)
Hash identifier: KQnb5xnHnNrlrS5aSa2aOb36g/RsohJBgwbvW6Valm8=
Subject key identifier: 5F:B8:C0:D4:DF:B3:38:A9:3D:AD:71:66:AE:CB:46:AF:AD:52:12:84
Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Certificate serial: 01A0DDCDF6CD18C636EDB23FCD997DA82A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
Manifest number: 02F8
Signing time: Sat 26 Sep 2026 13:00:57 +0000
Manifest this update: Sat 26 Sep 2026 13:00:57 +0000
Manifest next update: Sun 27 Sep 2026 13:00:57 +0000
Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: HNgit7KjL9yEgQIWUaKdWjZG+14Dy+DezvwsUyA2MXk=)
2: aRPei__YV55E5LayLWDZlLmCI2M.roa (hash: Cq96j35j1pjMRWQ8I4PQ7Ruzt7oVF+lvmFKi5QfS62o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:cd:f6:cd:18:c6:36:ed:b2:3f:cd:99:7d:a8:2a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Validity
Not Before: Sep 26 13:00:57 2026 GMT
Not After : Sep 27 13:00:57 2026 GMT
Subject: CN=5fb8c0d4dfb338a93dad7166aecb46afad521284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:72:2e:39:28:8f:b8:af:6c:64:25:1d:06:
b6:17:dd:3c:de:55:ab:82:ef:a0:aa:d1:fb:49:96:
01:6b:97:fc:cd:06:60:01:35:7a:81:4c:67:b6:97:
2a:44:27:ff:8f:bf:d2:51:90:89:9e:4e:58:63:33:
9a:14:bb:d4:01:f8:e0:18:a6:22:e8:55:56:3d:d6:
4c:ca:a9:ba:99:18:48:a0:9f:c3:66:27:ab:f3:eb:
2d:88:46:79:3f:47:33:fe:53:e3:98:c9:e0:64:12:
a0:d7:7c:e0:02:36:fb:a5:16:5d:d1:66:ed:46:c0:
d9:8c:e6:42:44:9c:9b:99:80:61:e6:4a:fe:98:3a:
be:42:54:b9:94:8b:79:20:b0:27:9f:da:50:96:04:
c2:39:54:f8:c2:41:31:bd:f8:d7:9a:1b:39:dd:14:
19:df:a1:0e:de:fd:08:f3:24:c9:3e:8c:07:3d:d6:
e0:6f:40:40:03:2b:5d:f4:2e:65:2c:77:2e:27:89:
f4:9c:dd:dc:28:1d:ff:4b:dd:4a:d7:38:75:e7:05:
5e:ec:43:c6:30:79:6b:be:62:94:36:6c:75:3a:ef:
31:e6:bd:11:fb:d4:0b:30:e3:da:ba:ea:94:28:af:
0b:a6:1e:36:fb:29:3f:1b:9d:85:87:78:80:7f:9e:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:C0:D4:DF:B3:38:A9:3D:AD:71:66:AE:CB:46:AF:AD:52:12:84
X509v3 Authority Key Identifier:
keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:55:19:33:48:2f:14:b0:c4:f6:ae:b7:37:d2:9a:b3:5d:88:
70:93:67:03:d1:ee:e5:5d:b0:bf:17:68:36:81:74:31:b6:14:
2f:93:0e:87:d5:b3:b4:cd:fd:1a:96:35:33:bb:a1:01:f1:eb:
ff:d1:ad:88:b9:bb:4d:06:06:95:03:c9:9d:71:b5:39:df:27:
bb:e5:cc:ad:6e:7a:2f:32:94:ca:46:45:0a:a9:67:90:ba:11:
4a:5e:c0:5d:9b:13:f6:87:03:5b:b5:bb:ad:55:23:94:76:5f:
8d:02:af:82:46:aa:68:aa:e4:b7:c6:35:17:12:e7:ff:30:4e:
52:5f:46:3a:31:33:e5:c6:0b:5d:4f:24:d5:0b:e9:26:5e:55:
19:b2:23:6b:62:6f:8c:88:ba:7f:c5:25:8a:9a:20:49:94:4f:
2f:a4:67:12:7a:d2:02:09:43:cb:52:1f:9d:36:22:64:7f:0a:
b6:58:64:38:15:e6:ce:e5:dc:62:e3:e2:d1:95:16:ec:25:da:
6a:b2:23:96:a8:d8:71:1e:ba:85:db:ea:2b:2d:21:66:f1:6a:
3f:8c:02:2c:22:e7:7a:e9:48:a4:eb:c7:0d:bd:75:3c:29:f4:
56:95:6e:92:0c:b6:56:0e:32:c6:e6:65:13:70:7e:6c:bd:12:
6a:0e:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:57:08 2026 by rpki-client